OSG Software SHA-2 Compliance Update

OSG VO and Site Administrators,

As of October 1st, 2013, Certificate Authorities (CAs) that are part of the International Grid Trust Federation (IGTF) will begin issuing certificates signed with the new SHA-2 hash algorithms. By this date you will need to update some components of the OSG middleware package to be SHA-2 compliant. At this point all software has been updated in the OSG software stack. To be fully compliant in all packages you will need to be updated to OSG 3.1.22 or greater. A full table of packages and the OSG version they are compliant at is available at https://www.opensciencegrid.org/bin/view/Documentation/Release3/SHA2Compliance. It is very important that you review this list and determine if commonly used software at your site needs to be updated.

The OSG Release Team is looking for early SHA2 adopters to help with the transition. If you have interest in being ahead of the SHA-2 curve and providing feedback to help during this transition please contact Tim Theisen at tim@cs.wisc.edu.

The OSG Production and Software Teams are available to answer your questions and support you during upgrade. Please open a ticket at http://ticket.grid.iu.edu/goc/submit if you have any questions or need assistance.